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METHOD AND DEVICE FOR OPERAND PROCESSING 
IN A PROCESSING UNIT 

R e lat e d Ait Field Of The Invention 

The present invention is based on a method and a device for operand processing in a processor 
unit having at least two execution units and a switchover between at least two operating modes, 
and also a corresponding processing unit according to th e d e finition of the speci e s in th e 
5 independent claims . 

Background Information 

Such processing units having at least two integrated execution units are also known as dual 
core architectures or multi-core architectures. According to the current related art, such dual 
core architectures or multi-core architectures are proposed mainly for two reasons: 

1 0 First of all, their use allows the output to be increased, i.e., enhanced performance, by regarding 
and treating the two execution units or cores as two computing units on a semiconductor 
component. In this configuration the two execution units or cores process different programs or 
tasks. This allows the performance to be increased, which is why this configuration is called 
performance mode. 

1 5 Apart from being used as super-scalar processors, the second reason for realizing a dual core or 
multi-core architecture is the increase in the reliability due to the fact that both programs 
process the same program in a redundant manner. The results of the two execution units are 
compared, and an error can then be detected in the comparison for agreement. In the following 
text this configuration is called safety mode. 

20 The two mentioned configurations are normally included in the dual architecture or multi-core 
architecture exclusively, that is, the computer having the at least two execution units is in 
principle operated in only one mode: either the performance mode or the safety mode. 

Summary Of The In vention 

It is the object of the present invention to allow the combined operation of such a dual core or 
25 multi-core processor unit with respect to at least two operating modes, in such a way that an 
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optimal switchover is achievable between at least two operating modes, i.e., between safety 
mod% and performance mode, in particular. 

Summary of the Inv e ntion 

For one, redundant processing of the operands or redundant execution of the programs or tasks, 
5 i.e., also of task programs, program parts, code blocks or also individual commands, is desired 
for reasons of safety. On the other hand, however, for cost considerations, it is not desirable to 
hold completely redundant hardware in readiness when executing functions that are not 
safety-critical. According to the present invention this conflict of goals is resolved by an 
optimized switch between at least two operating modes with one processing unit. 

10 The present invention therefore is based on a method and a device for the processing of 

operands in a processor having at least two execution units which are able to be operated at a 
predefinable clock pulse. The execution units are controlled by control signals for the 
processing of the operands, and a switch is possible between a first operating mode and a 
second operating mode. In the first operating mode, both execution units are advantageously 

15 supplied with identical operands, and in the second operating mode different operands are 

supplied to both execution units; moreover, in the first operating mode both execution units are 
controlled by identical control signals for the processing of the operands, and in the second 
operating mode both execution units are controlled by different control signals for the 
processing of the operands. 

20 In the first operating mode the operands are advantageously supplied to the execution units as a 
function of the clock cycle of the execution units, as full cycle, and in the second operating 
mode the operands are supplied for processing at a second clock cycle, which is faster than the 
full cycle. 

For practical purposes the clock cycle of the execution units and the full cycle are selected to be 
25 identical; in one special embodiment the faster, second clock cycle, as half cycle, is twice as 
fast as the full cycle. 

In an advantageous manner, the operands are processed in synchrony in both operating modes; 
a synchronous processing of the operands in the first operating mode and an asynchronous 
processing of the operands in the second operating mode is possible as well. 

30 For reasons of safety it may be provided that comparators compare the operands or data derived 
from the operands, such as ECC codes formed therefrom, for agreement, and an error will be 
detected in the case of deviations. It is also possible that states produced in the processing of the 
operands, such as derived data in the form of ECC codes or results, are compared for agreement 
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11 

by comparators, an error being detected here as well if deviations have occurred. In both cases, 
depending on the operating mode, it may be stipulated in the comparison whether such a 
comparison will be implemented or which operands, data, states or results will be compared. 

Prior to being written to a bus, the states or results are then released by a release signal, such 
5 release being implemented as a function of the operating mode and the result of the comparison, 
so that the states or results are releasable either simultaneously or successively. 

In addition to the at least two execution units, which are able to be operated at a predefinable 
clock cycle, the device or the processing unit of the present invention having such a device 
includes a control unit, in particular in the form of a switchover device, which switches 

10 between a first operating mode and a second operating mode and controls the execution units 
by control signals for the processing of the operands, this control unit being connected to the 
execution units and additional feed units. The control unit cooperates with the feed units in 
such a way that identical operands are supplied to both execution units in the first operating 
mode, and different operands are supplied to both execution units in the second operating mode. 

15 The control unit is designed such that in the first operating mode both execution units are 
triggered by the same control signals for the processing of the operands, and in the second 
operating mode both execution units are triggered by different control signals for the 
processing of the operands. 

For practical purposes the control unit and the feed units are designed such that in the first 
20 operating mode the operands are preferably supplied to the execution units as a function of the 
clock cycle of the execution units, as full cycle, and in the second operating mode the operands 
are supplied for processing at a second clock cycle, which is faster than the full cycle. 

The two execution units may be embodied solely as arithmetic logic units (ALUs) or also as 
complete computer cores or processing units (CPUs). In an advantageous manner the present 
25 invention may thus be used as execution units in a processing unit for all such at least dual-type 
components for operand processing. 

The feed units in the form of a register system are configured such that at least one operand 
register is provided and at least one buffer register is present between the operand register and 
each execution unit; the feed units and the execution units are designed in such a way that they 
30 operate, or are operated, on the basis of different clock cycles in the second operating mode - 
performance mode PM -, in particular that the feed units are designed such that they operate or 
are operated at a faster clock pulse than the execution units in the second operating mode, in 
particular at a clock pulse that is twice as fast. 
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A decoder by which a switchover condition is detectable is preferably provided, the decoder 
operating,, or being operated, on the basis of the same cycle as the feed unit. 



For practical purposes first switching means are optionally provided, which are embodied such 
or are able to be operated in such a way that they switch the feed means as a function of the first 
5 or second operating mode, and/or second switching means are provided, which are configured 
such or are able to be operated in such a way that they switch the execution units as a function 
of the first or second operating mode. 

The feed units and the execution units are advantageously designed to operate, or to be 
operated, on the basis of the same clock cycle in the first operating mode, the safety operating 
10 mode, and, in particular, to operate or be operated in a synchronous manner. 

Further advantages and advantag e ous r e fin e m e nts ar e deriv e d from th e sp e cification as w e ll as 
from the features of th e claims. 

Brief Description of th e Drawing 

Th e pr e sent inv e ntion i s e lucidat e d in th e following with r e f e r e nc e to th e figur e s illustrat e d in 
15 the drawing. Qf TJie Drawings 

Figure 1 and Figure 2 each show a processing unit having a duplicate arithmetic logic unit and 
an operand register system each having one operand register and one buffer register. 

Figure 3 also shows such a processing unit having a duplicate execution unit as well as an 
operand register system that differs from Figures 1 and 2, having two pairs of operand registers 
20 and a corresponding number of buffer registers in each case. 

Figure 4 shows different clock cycles for the feeding and processing of the operands, in 
particular half-cycle and full cycle. 

Figure 5 also shows a processing unit having a duplicate execution unit similar to Figure 3, 
only one operand input being available to the execution units, and only one operand register 
25 being provided in the operand-register system. 

Detailed Description of th e Ex e mplary Embodiments 

Unless noted otherwise, identical and/or functionally equivalent elements have been provided 
with matching reference numerals in Figures 1, 2, 3 and 5 of the drawing. 

The components of the processing unit that are not directly designed according to the present 
30 invention, such as memory units, peripheral units, the rest of the cores or CPUs in the 

illustration of the arithmetic logic unit, etc., are not directly shown in Figures 1 and 2 for 
reasons of clarity. However, the two arithmetic logic units, ALU A and ALU B, could just as 
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well correspond to FPUs or complete cores or CPUs within the framework of the present 
invention, so that the present invention could also be used for complete dual-core architectures 
as will be described later in Figures 3 and 5. However, in Figures 1 and 2 it is preferred that 
only the arithmetic logic unit is duplicated and the other components of the CPU be 
5 safeguarded by other fault-detecting mechanisms. 

In Figures 1 and 2, reference numerals 1 and 2 each denote individual arithmetic logic units 
(ALUs), or also floating point units (FPUs) as execution units. In this exemplary embodiment 
the arithmetic logic unit (ALU) is designed redundantly. Each individual ALU 1 , 2 has two 
inputs and one output. In test operation, the operands to be executed may be inserted into the 

1 0 inputs of ALUs 1 , 2 directly from bus 3, or they may be stored in advance in an operand register 
8, 9 specifically provided for this purpose. These operand registers 8, 9 are directly coupled to 
data bus 3. Both ALUs 1, 2 are thus supplied from the same operand registers 8, 9. In addition, 
it is possible that the operands in question have already been provided with ECC coding via the 
bus, the operands being stored in register areas 8A, 9A. That is to say, at all locations in Figures 

15 1 and 2 (and also in Figures 3 and 5 as explained later) where ECC is indicated, the data may be 
safeguarded through the use of an ECC (error correction code). 

Such methods for error detection take many different forms, the basic condition being the 
safeguarding by error detection or an error correction code, i.e., a signature. In the simplest 
case this signature may be made up of only one signature bit, such as a parity bit. On the other 

20 hand, the protection may also be realized by more complex ED (error detection) codes such as 
a Berger code or a Bose-Lin code, etc, or also by a more complex ECC, such as a Hamming 
code, etc., in order to allow reliable error detection by a corresponding bit number. However, it 
is also possible to use, for instance, a generator table (hardwired or in software) as code 
generator in order to assign to specific input patterns of the bits a desired code pattern of any 

25 desired length within the framework of the address. This ensures the security of the data, in 
particular by the correction function. Nevertheless, in the safety-critical mode, i.e., in safety 
mode SM, redundant processing of the safety-critical programs takes place in both execution 
units, i.e., in both ALUs 1 and 2, so that errors in the execution units are uncovered through a 
comparison for agreement. In the following text it will not be differentiated between the 

30 possible error coding options, the term ECC being used in general. 

To increase the performance, the programs or tasks or program parts, code blocks or 
commands that are not safety-relevant or safety-critical may be calculated in both execution 
units in distributed fashion in order to increase the processing speed and thus the performance. 
This is done in the so-called performance mode PM. 

35 When the specific operands are coupled into ALUs 1, 2, careful attention must be paid to 

inputting the correct data. For instance, if the same faulty operands are coupled into both ALUs 
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1, 2, no error can be detected at the output of ALUs 1, 2. Therefore, it must be ensured that at 
least one of -ALUs 1 or 2 receives a correct data-input value, or also that both ALUs 1, 2 
receive different, but incorrect data-input values. This is ensured in that a check sum, i.e., an 
ECC as mentioned earlier, is formed from at least one input value of one ALU 1, 2. In a 
5 specially provided comparator unit 5C, 6C, ECC coding 1 OA, 1 1 A from these additional data 
registers or buffer registers 10, 1 1 is compared with ECC coding 8 A, 9A from the original 
source register 8, 9. The input data from registers 10, 1 1 also may optionally be compared 
with those from source registers 8, 9. If a difference results in the ECC coding or in the 
operands, this will be interpreted as an error and an error signal will be output, possibly 

10 displayed and possibly corrected. This comparison advantageously takes place during 

processing of the operands in ALUs 1, 2, so that this error detection and error correction on 
the input side causes virtually no loss in performance. If one of comparator units 5C, 6C 
detects an error, the calculation may be repeated during the next cycle. A shaded register can 
be used for this purpose in order to always safeguard the operands of the most recent 

15 calculation so that they are rapidly available again in the event of an error. However, such a 
shaded register will not have to be provided if the specific buffer registers 10, 1 1 are 
overwritten again only via a release signal based on the absence of an error. If an error has 
occurred, comparator units 5C, 6C supply an error signal, causing buffer registers 10, 1 1 not 
to be overwritten again. 

20 ALUs 1 , 2 each generate one result on the output side. The result data provided by ALUs 1 , 2 
and/or their ECC coding are/is stored in result registers 12, 13, 12 A, 13 A. These result data 
and/or their coding are compared to each other in comparator unit 14C, 24C. If no error has 
occurred, a release signal 16 is generated. This release signal 16 is coupled into release device 
15, which is thereby induced to write the result data to a bus 4. The result data are then able to 

25 be processed again via bus 4. 

Release signal 16 also may be utilized to disconnect registers 8 through 1 1 again, so that the 
next operands may be read out from bus 3 and processed in ALUs 1,2. 

The system in Figure 1 does not check the result itself Here, the result data are merely 
compared with each other in comparator unit 14C. A check of the ECC coding of the result 
30 data is first possible by the system in Figure 2 where both the result data and their ECC coding 
are compared with each other in comparator unit 24C. 

All transient errors, permanent errors and also execution-time errors are detected by the 
fault-detection systems shown in Figures 1 and 2. Execution- time errors within an ALU 1, 2 are 
detected if the result does not arrive at the corresponding comparator unit and/or the 
35 corresponding result registers or if it arrives too late and a comparison thus takes place with a 
partial result. By protecting the operand registers and buffer registers 8,9, 10, 11 by 
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error-detection code and error-correction code and by comparing the final results the specific 
error location and error instant are able to be localized precisely. This allows a very fast 
response to a transient fault. 

The following possibilities for error localization therefore result: 

5 If a comparison of the result data in comparator unit 14C or 24C results in a difference, an error 
within ALUs 1 , 2 may be assumed. 

If a comparison of the ECC coding in one of comparator units 5C, 6C indicates a difference, a 
faulty signal from bus 3 or from upstream components may be assumed. 

If a comparison of the ECC coding in comparator unit 24C shows a difference, faulty coding of 
1 0 the results may be assumed. 

For the switch between mentioned safety mode SM where redundant processing and checking 
take place, and performance mode PM where the performance is increased by separate 
program processing, a control unit 17 is used, which, in particular, assumes the function of a 
switchover device. Using this switchover device 17, at least elements 8, 9 and 1, 2 are switched 

15 in such a way that in the one case, i.e., in safety mode SM, redundant program processing takes 
place, in particular synchronous program processing, and in the second operating mode, 
performance mode PM, parallel processing of different programs or operands is able to be 
implemented. To this end, switches or switching means may optionally be provided, which, for 
one, may be situated inside elements 8, 9 or 1, 2 or also in switchover device or control unit 17, 

20 or which may be included in the circuit arrangement separately, in addition to elements 8, 9, 1, 
2 or 17. 

For the switchover, the programs or task programs or program parts, i.e., code blocks, or also 
the commands or the operands themselves, are marked by an identification by which it is 
detectable whether they are safety-relevant and must thus be processed in safety mode SM, or 
25 whether they may be made available to performance mode PM. This can be done by using at 
least one bit, or also by marking the following sequence with the aid of a special command. A 
switchover may take place in the same way by accessing a specific, predefinable memory 
address via which performance mode PM or safety mode SM will then be triggered. 

The programs, for one, may include application functions, i.e., in particular be provided to 
30 control operating sequences in a vehicle, or else the switchover is implemented with respect to 
programs in which the identification occurs on the level of the operating system, i.e., entire 
operating-system tasks being assigned, for instance. 
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In a decoding, control unit 17 as switchover device may then recognize whether or not the 
following calculation is safety-relevant and should thus be executed in safety mode SM. If this 
is the case, the data are forwarded to both execution units 1 and 2. If this is not the case, i.e., if 
the further processing is carried out in performance mode PM, the data is made available to one 
5 execution unit, and the next command - provided it is not safety-relevant either - may then be 
forwarded to the second execution unit simultaneously, so that the programs or operands are 
processed in parallel at higher processing speed. 

In the first case (SM), for instance, the calculation of the result takes the same length of time 
with synchronous processing in both units. That is to say, in safety mode with synchronous 

10 processing the results are available simultaneously. These data are then provided with code 
again at the output, analogously to 12 and 13, and the data and/or the coding of these data are 
compared with result A and result B in the manner described in Figures 1 and 2. If they match, 
the data are released. Otherwise, one of the mentioned error reactions occurs. In the second 
case, i.e., in performance mode PM, when parallel processing of the data takes place, 

15 comparator 14C or 24C at the output of the two arithmetic logic units is not triggered, and the 
results, result A and result B, are written back into the register bank one after the other and may 
also be output one after the other in the way it is also done in a super-scalar processor. 

Since the same programs are processed in parallel in safety mode SM, i.e., in redundant fashion, 
a switchover occurs only if in performance mode PM a switchover is provided for both 

20 branches, i.e., register 8 and ALU 1 as well as register 9 and ALU 2, on the basis of the 

identification, for example. If fully synchronous processing takes place, i.e., processing of the 
program at the same time, this is the case to begin with; if the program is not processed in 
synchrony, or if it is processed asynchronously, the faster execution unit must wait for the 
lagging execution unit, so that control unit 17 switches over only when both identifications 

25 are present or have been analyzed. Such synchronism also must be generated - either by 
forced time synchronism or by waiting - for the result comparison or the ECC and result 
comparison according to blocks 12, 13 and 14C, 24C as well as 12A and 13 A. 

In an additional example according to the present invention, Figure 3 illustrates a circuit 
system having two execution units which, as components Kl and K2, are denoted by 300 and 

30 301 here. In contrast to the previously used arithmetic logic units (ALUs) in Figure 1 and 
Figure 2, these two components now represent, for instance, complete processor cores, 
so-called cores or also CPUs. The two components Kl and K2 also have two inputs and one 
output. Here, too, the operands to be executed may be directly coupled into the inputs of the 
components from bus 3, or they may be stored in advance in operand registers 8 and 9 

35 provided for this purpose. The further comments regarding operand registers 8 and 9 as well 
as the corresponding ECC coding are comparable to those of Figures 1 and 2 and apply here 
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as well. In principle, the same is also true for the post-connected data registers having an 
optional ECC component which are denoted by 1 10, 1 1, 210, 21 1 in Figure 3, and for the 
corresponding ECC coding in 1 10A, 1 1 1 A, 21 OA, 21 1 A. Compared to Figures 1 and 2, 
however, two individual pairs of buffer registers have been connected in series to the 
5 individual components as an additional specific embodiment. As already described in 
connection with Figures 1 and 2, faults in the feeding of operands, i.e., in the data-input 
values, are monitored by check-sum generation (ECC). Like in Figures 1 and 2, comparator 
units or comparators 15C, 16C, 25C and 26C according to the number of registers to be 
compared have been provided here as comparison means for error detection. Thus, if a 
10 difference results in the ECC coding or the operands, this is interpreted as an error and an 
error signal may be output, the error stored, the error displayed, an error reaction be initiated 
as a function of the error, in particular an emergency operation be started or an error 
correction. Here, too, as in Figures 1 and 2, a calculation may be repeated in the next clock 
cycle if an error has occurred, a shaded register possibly being used here as well. 

1 5 The results or states of the operand processing - result A or result - are then compared like in 
Figure 2 (the ECC codes being optional again) and checked for errors. As in Figure 2, 
registers 12 and 13 with ECC components 12A and 13A are utilized and comparator 24C as 
comparison means. In contrast to Figure 2, two result-release blocks, 15A and 15B, are used 
in this case, via which the result is released to bus 4 by means of release signal 16. 

20 In this Figure 3, where elements of processor unit 102 are shown, which are configured 

according to the present invention, the function of the control unit - denoted by 302 here - 
will now be examined in greater detail. For reasons of clarity, the outputs, which are 
indicated by the arrows on control unit 302, are not shown in detail since first switching 
means 308 through 315, control circuit 37 or the elements included therein, and - optionally 

25 - operand registers 8 and 9 and - also optionally - buffer registers 110, 111 and 210, 21 1 are 
triggered thereby. 

Here, too, control unit 302 has a switching function in a certain sense, in order to change from 
one operating mode to another operating mode. That is to say, in particular a change takes 
place from safety mode SM to performance mode PM and vice versa, which is accomplished, 
30 for instance, through the use of predefinable control signals according to the particular 
operating mode. 

Depending on the detected operating mode, the aforementioned elements are therefore 
triggered in an appropriate manner as a function of a switchover condition, as already 
explained in connection with Figures 1 and 2. Control circuit 37 includes a decoder 303, a 
35 second switching means 304, optionally two registers or latches 307 and 306. Here, too, once 
again for reasons of security, the ECC codings from region 3 03 A assigned to the decoder and 
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from region 306A assigned to register 306 may be compared with the aid of comparator 305C. 
This-control circuit 37 or also portions thereof, may also be accommodated in control unit 
302 or be identical with it. 

When using an identification or identifier as switchover condition or also a predefmable 
5 memory address as discussed in connection with Figures 1 and 2, the control unit can 

determine in a decoding whether or not the following calculation is safety-relevant. If this is 
the case, i.e., if the operands are processed in safety mode SM, the same operands - operand 1 
and operand 2 in this case - are forwarded to both execution units 300 and 301. Both 
execution units are triggered by the same control signals for the processing of the operands. 

10 The feeding of the operands to the execution units and the clock cycle of the execution units 
for the processing of the operands are adapted to one another. In a preferred specific 
embodiment, the feed units (i.e., at least operand registers 8 and 9) and the execution units as 
well as decoder 303 each operate at the same clock cycle, i.e., the same cycle. In particular, 
both sides - i.e., the feed unit having operand register 8 and execution unit 300 - operate at 

15 the same clock cycle, and the feed unit having operand register 9 and execution unit 301 

likewise operate at the same clock cycle. In a preferred specific embodiment both sides are 
synchronous, so that the operands are processed in synchrony in safety mode SM, which 
means that the result or a corresponding processing state, result A and result B, of both sides 
is present in registers 12 and 13 at the same time. 

20 The corresponding feed unit thus includes at least the corresponding operand register 8 or 9. 
Furthermore, depending on the specific embodiment, at least one buffer register 10 or 1 1 is 
possible in the feed unit in Figure 1 or 2, or 1 10, 111 or 210, 21 1 in Figure 3. Also included in 
the feed unit could be first switching means so that the operands may be switched through 
according to the clock cycle. These first switching means 308, 310, 312, 314 could be present 

25 either separately, as shown in Figure 3, or they could be integrated in at least one of the 

corresponding registers (operand register 8 or 9, corresponding buffer register 10 or 11, 110, 
111,210, 211). Depending on whether an EEC coding is used, the individual register sections 
(10A, 11A in Figures 1 and 2, or 110A, 111A, 210A, 211 A in Figure 3) as well as the 
associated comparators (5C, 6C in Figures 1 and 2 as well as 15C, 16C, 25C, 26C in Figure 3) 

30 are optionally part of the particular feed unit. The same applies to the first switching means 
within the framework of the ECC coding (309, 311,313, 315 in Figure 3), i.e., these are also 
optionally part of the particular feed unit und could likewise be separate or be integrated in at 
least one of the corresponding registers (ECC operand register 8A or 9A or corresponding 
buffer register 10A or 1 1 A, 1 10A, 1 1 1 A, 21 OA, 21 1 A). The individual feed units thus 

35 correspond to the particular elements in the corresponding feed path to the execution units; it 
is possible to use the division as shown in Figures 1, 2, 3 or 5 or it is also possible to combine 
everything or parts into one component. 
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If the results or states of the operand processing are available simultaneously in safety mode, 
i.e., the first operating mode, they will subsequently be coded (ECC) again at the output of 
the individual execution unit in corresponding registers 12 with 12A and 13 with 13 A, and 
the results or the processing states, result A, result B and/or the codings (ECC) of these 
5 results, are compared. Comparator 24C is used for this purpose. If they agree, the data will be 
released again via release signal 16 and written to bus 4 by units 15A and/or 15B. The release 
signal is preferably generated by the comparator, but may also be generated by the control 
unit. In safety mode SM the results are identical upon release and are therefore written to bus 4 
once. If there is a difference, the results will not be released and not written to the bus, but 

10 written into an error register, for instance, or a flag or an error signal will be generated in order 
to initiate a display or a corresponding error reaction. The use of a shaded register, in particular, 
is possible here for the backwriting, as already described in connection with the operand 
registers in Figures 1 , 2 and 3. In a special case, in safety mode SM, the operands may also first 
be conveyed to an execution unit, the error detection code EEC then be checked and the 

1 5 operands subsequently be supplied to the second execution unit, all of this taking place in the 
same cycle section, as full cycle. 

If it is detected in accordance with the switchover condition that processing of the operands 
takes place in the second operating mode, performance mode PM, only one execution unit is 
provided with the corresponding operand(s), the following operand(s) (provided they are also 

20 to be processed in non-safety-relevant manner) being forwarded to the second execution unit 
virtually simultaneously (in the same full cycle), i.e, in the next half-cycle section. The feed 
units operate at a faster clock cycle than the two execution units, in particular at double the 
clock cycle, i.e., at the so-called half-cycle. No result comparison takes place in this not 
safety-critical operand processing, and the individual results or states are written to bus 4 

25 correspondingly, in particular alternately. No release is necessary in this case. In particular in 
this second operating mode, performance mode PM, it is conceivable that both sides, especially 
the execution units, are not synchronized and thus operate asynchronously. Collisions in 
writing to the bus may be prevented by time conditions such as time slots, event control or by 
arbitration. 

30 Figure 4 illustrates the full cycle by TS 1, and the half cycle is illustrated by TS 2. In safety 

mode SM the operands are conveyed to the two execution units in a redundant manner in each 
full cycle TS 1, where they are processed at the same full cycle, in particular. In a fully 
synchronous processing of the operands the results are then able to be compared directly; 
otherwise a synchronization must take place, for the result comparison at the latest. In 

35 performance mode PM, the second operating mode, the feed unit operates at a half cycle, so 
that, for instance, the first operand(s) is/are supplied to one execution unit at Tl, and the next 
operand(s) is/are supplied to the other execution unit at Tl/2, so that the first and next operands 
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are processed in the execution units in a full cycle-cycle. For example, in performance mode 
PM,«the individual execution units, i.e., especially operand registers 8 and 9, operate at a faster 
clock cycle than the execution units, in particular at twice the speed. Decoder 303 for acting 
upon second switching means 304, which applies the corresponding control signals to the 
5 execution units, also operates on the basis of this faster cycle, in particular at twice the speed. 

The principle of the present invention may be used for execution units having at least two 
operand inputs as shown in Figures 1, 2 and 3, i.e., for execution units which process or require 
a plurality of operands, but also for execution units which have only one operand input as 
shown in Figure 5. 

10 Figure 5 essentially shows the same elements already described in connection with Figure 3, 
with the exception that execution units 500 and 501 have only one operand input. Accordingly, 
only one operand register 8 is provided and correspondingly, buffer registers 110 and 210. The 
same applies to the associated elements with regard to error detection code ECC, elements 
1 10A, 21 OA with corresponding comparators 15C and 25C. First switching means 508 and 510 

1 5 correspond to switching means 308 and 3 10 in Figure 3, and first switching means 509 and 511 
correspond to switching means 309 and 311. Here, too, the ECC elements are optional. The 
first switching means may once again be separate or included in the corresponding register. 
Here the operands are supplied sequentially, and in performance mode PM - the second 
. operating mode - they are alternately supplied to the execution units at a half cycle. In safety 

20 mode SM the operands are supplied to the execution units using the full cycle, so that the same 
operand will be supplied in each case and processed in the execution units in a redundant 
manner. Within the framework of this functionality, control circuit 57 corresponds to control 
circuit 37 of Figure 3, with the exception that it relates to the one-operand principle. In the 
same manner, control unit 502 corresponds to control unit 302 from Figure 3, once again 

25 relating to the one-operand principle and the adaptations associated therewith. 

The results and/or states in safety mode SM are compared to each other at the output 
(optionally also ECC, only if the error-detection code unit is to be tested as well), as described 
in connection with Figure 3. Error-detection code ECC is formed from this result preferably 
only after the result has been compared, thereby ensuring that the codings were formed from a 
30 correct result. In performance mode PM the results of the execution units are transmitted to the 
bus sequentially, in the sequence in which the operands were supplied to the execution units. 
The continuity of the concept may be optimized in that all illustrated ECC codings are formed 
and checked and transmitted to the bus as well, various stages of this continuity or safety 
relevance being possible. 

35 All mentioned exemplary embodiments are essentially comparable according to the principle 
of the present invention and are thus able to be combined and joined as desired. Additional 
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specific embodiments within the framework of the principles of the present invention are 
possible, soihat these specific embodiments should not be considered restrictive in this regard. 
This also means that the statements made in connection with the individual exemplary 
embodiment are also applicable to and valid for the other specific embodiments within the 
principle of the present invention. 
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Abstract Of The Disclosure 
A method and a device for operand processing in a processing unit having at least two 
execution units, which are able to be operated at a predefinable clock cycle. The execution 
units are controlled by control signals for the processing of the operands and a switch is 
5 possible between a first operating mode and a second operating mode. In the first operating 
mode, both execution units are supplied with the same operands, and in the second operating 
mode different operands are supplied to both execution units, and both execution units are 
controlled by the same control signals for the processing of the operands in the first operating 
mode, and both execution units are controlled by different control signals for the processing of 
10 the operands in the second operating mode. 

(Figur e 3) 
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